Stefan Cornelius discovered that Gimp could miscalculate the size of heap
buffers when processing PSD images. By tricking a user into opening a
specially crafted PSD file with Gimp, an attacker could exploit this to
execute arbitrary code with the user's privileges.